Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6986783B9C11ED9C48A698F1222468.roa
File:                     0D6986783B9C11ED9C48A698F1222468.roa (raw, json)
Hash identifier:          48KnTSvwL+x6rPENOPGBoPvu8L9aTqdNXcNr59XZ+D0=
Subject key identifier:   E3:B8:88:8D:4B:17:D2:5C:AA:01:42:9E:CE:C3:FC:B0:14:4E:E1:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1864
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6986783B9C11ED9C48A698F1222468.roa
Signing time:             Sat 24 Sep 2022 00:01:34 +0000
ROA not before:           Sat 24 Sep 2022 00:00:31 +0000
ROA not after:            Sun 15 Jan 2023 00:00:31 +0000
asID:                     1239
IP address blocks:        156.251.96.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6244 (0x1864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 24 00:00:31 2022 GMT
            Not After : Jan 15 00:00:31 2023 GMT
        Subject: CN=632e48de-6277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:d3:a4:ef:35:ab:ba:f1:4e:b4:c1:6e:ab:
                    0c:48:01:2f:29:8a:a5:29:ac:83:5f:95:32:7e:11:
                    2e:d8:2c:35:dc:8a:ff:73:fa:88:04:c2:66:a5:ff:
                    4d:2d:20:1a:2f:2c:2f:be:e5:d7:ca:1f:a2:1d:a3:
                    05:f9:24:55:af:ca:83:c0:57:20:1b:59:db:fa:dc:
                    a3:27:c4:ff:97:62:3d:f4:04:84:ef:ad:bc:7d:f1:
                    00:80:42:ff:79:e4:11:73:c4:4b:1c:49:5b:46:4a:
                    b4:b9:53:14:12:f4:95:7a:9f:96:61:77:57:b0:a4:
                    20:af:80:3c:ae:7b:50:18:6d:f6:6a:eb:77:0c:5a:
                    17:40:9c:a7:55:ac:b2:55:07:cf:21:38:dc:0a:5e:
                    28:59:18:c7:31:34:17:c0:4b:9d:db:91:1a:39:07:
                    64:09:7a:64:ed:b8:3c:72:08:45:0f:6f:12:6a:a0:
                    ab:a3:53:7f:63:84:11:54:7f:06:df:cb:a4:1e:ef:
                    3b:76:05:2c:c2:d5:8c:66:ab:0a:06:97:e7:12:1b:
                    f1:39:7a:46:53:28:15:3d:46:fc:f5:f9:63:c8:6f:
                    9b:79:80:7f:70:f1:1c:30:a8:09:87:98:42:cb:ae:
                    88:33:32:f9:d1:e6:6a:6f:72:1f:15:b7:4b:a5:3e:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B8:88:8D:4B:17:D2:5C:AA:01:42:9E:CE:C3:FC:B0:14:4E:E1:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6986783B9C11ED9C48A698F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:96:5a:5b:48:2b:3c:b1:66:f2:74:46:77:bc:f3:03:f6:6f:
         50:1a:f4:17:64:96:f8:4f:0a:f1:4c:79:62:0d:ba:5f:50:e2:
         24:96:d6:61:e3:f6:c3:e2:04:fc:b5:6e:43:9c:1b:7e:64:27:
         0b:d3:74:40:05:ac:d3:5d:06:bf:a7:29:ed:37:88:72:50:4f:
         f4:47:c0:60:7d:56:a5:92:e5:fe:00:15:23:c2:9e:72:1f:91:
         9c:99:84:7b:f3:a5:c7:c9:cb:db:ab:01:ec:17:37:9f:eb:af:
         ee:cb:79:43:d4:e3:cf:b1:bb:cb:a6:75:81:7c:c6:dd:a2:ec:
         d5:b9:59:34:d0:9d:e7:67:2d:a0:5d:e5:d1:1c:03:84:60:e9:
         93:c4:fc:4c:86:7f:4d:12:d9:03:63:bf:c4:f7:8a:c0:07:6e:
         d9:58:d8:2a:37:c3:7e:2f:c7:3c:04:8b:5f:a1:ee:e7:89:de:
         8a:9b:fc:be:c8:fb:0c:a9:ce:cd:2f:f3:6c:d3:c4:56:29:86:
         41:00:c1:22:87:e1:20:97:2b:d6:5a:d0:56:e5:ac:ed:43:45:
         27:7b:bd:68:87:17:09:a8:79:e8:63:7b:04:04:d6:e5:0b:ab:
         7f:da:9d:d4:1a:53:cb:5e:e3:80:64:9a:ba:01:dd:b5:65:73:
         4c:43:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----